VDB

ALPINE-CVE-2023-0225

ALPINE-CVE-2023-0225 PUBLISHED CVSS 4.300000190734863 MEDIUM

A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.

Risk Scores

CVSS v3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersions
Alpine:v3.18samba0, 3.2.10-r0, 3.2.11-r0
Alpine:v3.19samba4.8.8-r0, 4.8.7-r0, 4.8.5-r0
Alpine:v3.23samba0, 3.2.10-r0, 3.2.11-r1
Alpine:v3.21samba3.2.10-r0, 4.8.8-r0, 4.8.7-r0
Alpine:v3.20samba0, 4.8.8-r0, 4.8.7-r0
Alpine:v3.22samba0, 4.8.8-r0, 4.8.7-r0

Timeline

  • Apr 3, 2023 CVE Published
  • Dec 3, 2025 CVE Updated
  • Apr 30, 2026 Distribution Patch
Open in Interactive Console →
$ Console Community · 100/wk Open console ›